python-M2Crypto/python-M2Crypto.changes

590 lines
22 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

-------------------------------------------------------------------
Wed Apr 3 09:22:02 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
- Build for modern python stack on SLE/Leap
-------------------------------------------------------------------
Wed Jan 24 17:00:29 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
- Disable broken tests with openssl 3.2, bsc#1217782
-------------------------------------------------------------------
Wed Jan 3 09:51:38 UTC 2024 - Dirk Müller <dmueller@suse.com>
- require setuptools
-------------------------------------------------------------------
Tue Oct 24 15:13:16 UTC 2023 - Matej Cepl <mcepl@cepl.eu>
- Update to 0.40.0:
- OK, SO NOT THIS RELEASE, BUT IN THE NEXT RELEASE PYTHON2 WILL
TRULY GO!
- BREAKING CHANGES:
- There are no SWIG generated files (src/SWIG/_m2crytpo_wrap.c)
included anymore, so swig must be installed, no
exceptions! Also, for compatibility with Python 3.12+, swig
4.0+ is required.
- All support for asyncore has been removed, as it has been
removed in Python 3.12 as well (which means also removal of
contrib/dispatcher.py, M2Crypto/SSL/ssl_dispatcher.py,
ZServerSSL).
- All use of distutils (including the bundled ones in
setuptools) has been removed, so `setup.py clean` is no
more.
- Excessively complicated and error-prone __init__py has been
cleaned and `import M2Crypto` doesnt include everything
anymore. Imports should specified as for example with `from
M2Crypto import foo`.
- ASN1_Time handling has been mostly rewritten and it almost
works even on Windows.
- All tests in Gitlab CI (with exceptions of some skipped tests
especially on Windows) are now green, tests of Python 2.7 on
CentOS 7 have been included.
- Introduce m2.err_clear_error()
- Make X509_verify_cert() accessible as m2.x509_verify_cert
- Add 32bit_ASN1_Time.patch to quench errors on 32bit archs.
-------------------------------------------------------------------
Mon Aug 7 13:14:41 UTC 2023 - Matej Cepl <mcepl@suse.com>
- Make tests running again.
-------------------------------------------------------------------
Tue Jul 4 19:21:57 UTC 2023 - Matej Cepl <mcepl@suse.com>
- Update to 0.39.0:
- SUPPORT FOR PYTHON 2 HAS BEEN DEPRECATED AND IT WILL BE
COMPLETELY REMOVED IN THE NEXT RELEASE.
- Remove dependency on parameterized and use unittest.subTest
instead.
- Upgrade embedded six.py module to 1.16.0 (really tiny
inconsequential changes).
- Make tests working on MacOS again (test_bio_membuf: Use fork)
- Use OpenSSL_version_num() instead of unrealiable parsing of
.h file.
- Mitigate the Bleichenbacher timing attacks in the RSA
decryption API (CVE-2020-25657)
- Add functionality to extract EC key from public key + Update
tests
- Worked around compatibility issues with OpenSSL 3.*
- Support for Twisted has been deprecated (they have their own
SSL support anyway).
- Generate TAP while testing.
- Stop using GitHub for testing.
- Accept a small deviation from time in the testsuite (for
systems with non-standard HZ kernel parameter).
- Use the default BIO.__del__ rather tha overriding in BIO.File
(avoid a memleak).
- Resolve "X509_Name.as_der() method from X509.py -> class
X509_Name caused segmentation fault"
- Remove upstreamed patches:
- CVE-2020-25657-Bleichenbacher-attack.patch
- m2crypto-0.38-ossl3-tests.patch
- openssl-adapt-tests-for-3.1.0.patch
- openssl-stop-parsing-header.patch
- timeout_300hz.patch
-------------------------------------------------------------------
Tue Jun 27 10:51:14 UTC 2023 - Dirk Müller <dmueller@suse.com>
- add timeout_300hz.patch to accept a small deviation from time
in the testsuite (bsc#1212757)
-------------------------------------------------------------------
Thu Mar 16 10:35:33 UTC 2023 - Otto Hollmann <otto.hollmann@suse.com>
- Adapt tests for OpenSSL v3.1.0
* Add openssl-adapt-tests-for-3.1.0.patch
-------------------------------------------------------------------
Mon Nov 7 20:14:16 UTC 2022 - Dirk Müller <dmueller@suse.com>
- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch
-------------------------------------------------------------------
Wed Aug 3 16:48:00 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
contain the fix rather than just being empty (CVE-2020-25657,
bsc#1178829)
-------------------------------------------------------------------
Tue Jul 12 20:49:47 UTC 2022 - Matej Cepl <mcepl@suse.com>
- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
bsc#1178829), which mitigates the Bleichenbacher timing attacks
in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.
-------------------------------------------------------------------
Thu Apr 7 15:45:07 UTC 2022 - Matej Cepl <mcepl@suse.com>
- Add missing bug references to this changelog.
-------------------------------------------------------------------
Mon Jun 14 21:04:54 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Update to 0.38.0:
- Remove the last use of setup.py test idiom.
- Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
- Add support for arm64 big endian <Steev Klimaszewski>
- Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
- Move project to src/ layout
- Allow verify_cb_* to be called with ok=True <Casey Deccio>
- Be prepared if any of constants in x509_vfy.h is not available.
- But we do support 3.8
- We DO NOT support Python 2.6.
- All patches were upstreamed:
- 293_sslv23_padding.patch
- no-need-parameterized.patch
- python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
-------------------------------------------------------------------
Thu Apr 22 22:33:46 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Add no-need-parameterized.patch ... we don't need run-time requirement
of parameterized package (bsc#1185150).
-------------------------------------------------------------------
Fri Feb 19 12:56:50 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
(gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).
-------------------------------------------------------------------
Wed Feb 17 11:18:07 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- OpenSSL allows the verificaton to continue on
UNABLE_TO_VERIFY_LEAF_SIGNATURE
* This unifies the behaviour of a single certificate with an
unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
(Thanks for Debian,
https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)
-------------------------------------------------------------------
Wed Feb 17 10:57:56 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Add source signature file
-------------------------------------------------------------------
Wed Jan 13 08:16:04 UTC 2021 - Matej Cepl <mcepl@suse.com>
- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest
-------------------------------------------------------------------
Tue Dec 8 17:58:23 UTC 2020 - Matej Cepl <mcepl@suse.com>
- Update to 0.37.1:
- Remove support for CentOS 6 and Python 2.6 (remove
tests.vendor module). Python 2.7 is still fully supported.
- Remodel CI:
- on GitHub switched from Travis-CI to GH Actions
- on GitLab-CI: stop testing 2.7 on Fedora, add centos7
- update appveyor.yml
- Stop playing with swig in setup.py, we don't support swig 1.*
anymore.
- Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
- Replace deprecated PyObject_AsReadBuffer with our own shim
(thanks to Casey Deccio for saving my bacon there).
- Use parametrized to create parametrized tests (new external
dependency).
- Only use DigestSign() and DigestUpdate() with OpenSSL >= 1.1.1
- Expose all the X509_V_FLAG
- Add support for DigestSign* and DigestVerify*
-------------------------------------------------------------------
Mon Jul 13 21:07:34 UTC 2020 - Matej Cepl <mcepl@suse.com>
Update to 0.36.0:
- wrap SocketIO in io.Buffered* for makefile <lethliel>
- SSL.Connection.close accepts an argument to force the socket closing
<Christophe Haen>
- SSL.Connection: make the clientPostConnectionCheck an instance
attribute <Christophe Haen>
- Fixed bug with usage of unexisting method getreply at SSL_Transport
<roman-nagaev>
- Add appveyor builds for python 3.7 and 3.8 <Daniel A. Wozniak>
- Fixed syntax warning on line 44. <randomfox>
- Update M2Crypto.six to 1.13.0 <Matěj Cepl>
- base64.decodestring() was finally removed in Python 3.8. <Matěj Cepl>
- wrap SocketIO in io.Buffered* for makefile <lethliel>
- NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
<Matěj Cepl>
- Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
X509_STORE_SET_FLAGS function <Christophe Haen>
- Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 <Matěj Cepl>
- Extend test cert validity to 2049 <Bernhard M. Wiedemann>
- Revert using typing module in 2.6. It is just not worthy. <Matěj Cepl>
- Update Debian/stable SSL as well <Matěj Cepl>
- Make tests pass again. <Matěj Cepl>
- Stop using string module, which has been deprecated. <Matěj Cepl>
- Tiny fixes to make pyls more happy <Matěj Cepl>
- CI: Rework Fedora CI configuration <Neal Gompa>
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.
-------------------------------------------------------------------
Wed Apr 8 12:30:32 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
- Do not pull in py2 pkg on doc subpkg
-------------------------------------------------------------------
Mon Mar 9 09:56:49 UTC 2020 - Marco Strigl <marco.strigl@suse.com>
- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
returns a socketIO which is no buffer.
Added: 001-fix-buffering-for-python38.patch
-------------------------------------------------------------------
Mon Jun 10 13:59:24 CEST 2019 - Matej Cepl <mcepl@suse.com>
- Update to fix release 0.35.2 ... just fixing the test suite
(bsc#1172226).
-------------------------------------------------------------------
Sat Jun 8 08:58:56 CEST 2019 - Matej Cepl <mcepl@suse.com>
- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
(there is really not much more in it; bsc#1149792).
-------------------------------------------------------------------
Fri Jun 7 22:21:23 CEST 2019 - Matej Cepl <mcepl@suse.com>
- Add fix_OpenSSL111c.patch patch to ensure compatibility with
OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.
-------------------------------------------------------------------
Thu Jun 6 12:27:35 UTC 2019 - Ondřej Súkup <mimi.vx@gmail.com>
- Upgrade to 0.34.0
- no upstream changelog
-------------------------------------------------------------------
Fri Apr 26 16:48:44 CEST 2019 - Matej Cepl <mcepl@suse.com>
- Upgrade to 0.33.0 (bsc#1135009):
- eb4525c - Stop pretending to support Python 3.4.
- 6a89548 - Fix use of urlunsplit (25 hours ago)
- 0a5a356 - tests/test_ssl: use -ciphercuites for TLS1.3 cipher in
openssl1.1
- 8a0a3e3 - There are apparently multiword CPP variables. Taking that
into account.
- Remove
0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
as it included in the latest release.
-------------------------------------------------------------------
Thu Mar 7 14:14:45 CET 2019 - Matej Cepl <mcepl@suse.com>
- Fix for compatibility with OpenSSL 1.1.0h by adding the patch
0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
-------------------------------------------------------------------
Tue Mar 5 09:01:46 CET 2019 - Matej Cepl <mcepl@suse.com>
- Update to 0.32.0:
* 471582f - setup.py: use ${CPP} as path to cpp <Duncan Macleod>
* efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j
* 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs
* effc7be - Add type comment to setup.py <Matěj Cepl>
-------------------------------------------------------------------
Wed Dec 5 14:30:23 UTC 2018 - Matej Cepl <mcepl@suse.com>
- Whoops! Here -devel dependency certainly should stay
-------------------------------------------------------------------
Tue Dec 4 12:50:42 UTC 2018 - Matej Cepl <mcepl@suse.com>
- Remove superfluous devel dependency for noarch package
-------------------------------------------------------------------
Fri Nov 9 15:20:09 CET 2018 - mcepl@suse.com
- Update to 0.31.0 released tarball:
* Compatibility with OpenSSL 1.1.1 (partly workaround, maybe
requires further investigation)
* Fixes for Windows builds
* Fixes of installs on AWS Lambda
* Fixes of Mac OS X related failures
* Fix Python 2.6 compatibility issues
-------------------------------------------------------------------
Tue Nov 6 17:26:23 CET 2018 - mcepl@suse.com
- pre-release of 0.31.0 tarball
- add openssl-1_1_1-compat.patch to fix OpenSSL 1.1.1 compatibility.
-------------------------------------------------------------------
Mon Sep 24 15:14:14 UTC 2018 - Matěj Cepl <mcepl@suse.com>
- Update to 0.30.1:
* Various small typos (Windows builds, Fix SSL.Connection.__del__)
* The project is now Linux-distribution agnostic
* Replace all old-style classes with the new ones (it shouldn't
cause any problems, but feel free to file an issue, if it does)
* Do not by-pass a potential transfer decoding in m2urllib2
* Update M2Crypto.six with 1.11.0 and replace our local workarounds
with new functions.
* SSLv3 just removed.
* Don't support Python 2.6 on Windows anymore. Windows users don't
have python as a system package, so they are usually more likely
to upgrade anyway.
-------------------------------------------------------------------
Fri Feb 23 17:38:27 UTC 2018 - michael@stroeder.com
- Update to 0.29.0 (Fixes of some small bugs)
-------------------------------------------------------------------
Tue Feb 20 11:14:52 UTC 2018 - tchvatal@suse.com
- Require python-xml that is used by some parts of M2crypto
-------------------------------------------------------------------
Fri Feb 9 22:30:59 UTC 2018 - michael@stroeder.com
- Update to 0.28.2:
* Fix ppc builds
-------------------------------------------------------------------
Fri Feb 9 09:56:10 UTC 2018 - tchvatal@suse.com
- Enable tests, fix docu install phase
-------------------------------------------------------------------
Thu Feb 8 18:57:19 UTC 2018 - michael@stroeder.com
- Removed obsolete patches fix-build-python3.diff
and fix-openssl-include-path.diff
- Update to 0.28.1
* compability with Python 3
* building on Mac OS X should be now more reliable and automagic
* Fix licence in metadata: it is MIT, not BSD
* Fix and add tests for SWIG/_aes.i module
* Bundle-in unittest2 for Python 2.6
* Remove all PGP modules
-------------------------------------------------------------------
Wed Nov 8 18:13:06 UTC 2017 - jmatejek@suse.com
- use generic way to require python-typing now that python3 provides it
-------------------------------------------------------------------
Wed Oct 25 20:07:14 UTC 2017 - michael@stroeder.com
- License set to MIT
-------------------------------------------------------------------
Fri Oct 20 13:51:00 UTC 2017 - alarrosa@suse.com
- Remove unnecessary fdupes call
-------------------------------------------------------------------
Wed Oct 18 07:13:58 UTC 2017 - alarrosa@suse.com
- Update to 0.27.0
* Fix licence: it is MIT, not BSD
* At least minimal support of SNI in httpslib.
* Small bugfixes and cleanups.
* More effort to make build system more robust.
* Restore m2.rsa_set_e() and m2.rsa_set_n().
* Make sure that every exceptional return throws and exception and viceversa.
- Add patch fix-build-python3.diff to let it build with python3
- Add patch fix-openssl-include-path.diff to fix openssl include path
(the code already includes the openssl/ part)
- Create a new package python-M2Crypto-doc for documentation since rpmlint
was complaining around 75% of the package was documentation.
-------------------------------------------------------------------
Tue Sep 26 12:32:25 UTC 2017 - michael@stroeder.com
- Update to 0.26.4 with fix for OpenSSL 1.1.0 and LibreSSL
-------------------------------------------------------------------
Fri Sep 22 19:22:13 UTC 2017 - michael@stroeder.com
- Update to 0.26.3 with fix for a syntax error
-------------------------------------------------------------------
Thu Sep 21 06:42:10 UTC 2017 - michael@stroeder.com
- Update to 0.26.2
* compatibility with OpenSSL 1.1.0
-------------------------------------------------------------------
Mon Jun 19 21:47:35 UTC 2017 - sebix+novell.com@sebix.at
- only require python3-typing if necessary
-------------------------------------------------------------------
Sat May 6 03:33:01 UTC 2017 - toddrme2178@gmail.com
- It doesn't look like python3-m2crypto ever existed, so don't
provide it.
-------------------------------------------------------------------
Thu Apr 27 15:56:24 UTC 2017 - alarrosa@suse.com
- Add python-typing as a dependency
-------------------------------------------------------------------
Wed Apr 26 15:50:39 UTC 2017 - alarrosa@suse.com
- Provide python-m2crypto in the python2 package
-------------------------------------------------------------------
Tue Apr 18 21:03:56 UTC 2017 - toddrme2178@gmail.com
- Update to 0.26.0
* No changelog provided
- Implement single-spec version.
-------------------------------------------------------------------
Mon Sep 12 10:53:53 UTC 2016 - dmueller@suse.com
- use pypi.io as Source URL
-------------------------------------------------------------------
Fri Jul 22 14:06:42 UTC 2016 - michael@stroeder.com
- update to 0.25.1
- set new dependency on package python-typing
-------------------------------------------------------------------
Fri Jun 3 13:05:13 UTC 2016 - jweberhofer@weberhofer.at
- update to 0.24.0 (bsc#1001377)
* No changelog provided
- README is no longer included
- Removed obsolete python-M2Crypto-SWIG-3.0.5.patch
-------------------------------------------------------------------
Mon Dec 7 13:29:40 UTC 2015 - opensuse@dstoecker.de
- fix SSLv2 link error for 13.2 and Leap 42.1 (M2Crypto-0.22.5-SSLv2_link_error.patch) (bsc#969731)
-------------------------------------------------------------------
Sat Dec 5 20:42:42 UTC 2015 - opensuse@dstoecker.de
- update to 0.22.5, fix URL
- drop python-M2Crypto-SWIG-3.0.5.patch (functionality included upstream)
-------------------------------------------------------------------
Thu Nov 26 09:35:28 UTC 2015 - hpj@urpla.net
- SLE12 requires swig3 for a successful build, too
-------------------------------------------------------------------
Tue Nov 17 17:54:49 UTC 2015 - hpj@urpla.net
- fix build for openSUSE Leap 42.1 (requires swig3)
-------------------------------------------------------------------
Tue Feb 24 11:35:42 UTC 2015 - dimstar@opensuse.org
- Add python-M2Crypto-SWIG-3.0.5.patch: Fix generation of M2Crypto
module when using SWIG 3.0.5.
- Manually install _m2crypto shadow file: setup.py misses it.
(boo#917759, boo#917815).
-------------------------------------------------------------------
Thu Apr 17 19:49:12 UTC 2014 - hrvoje.senjan@gmail.com
- Update to 0.22.3
* No changelog provided
- Demos are no longer included
-------------------------------------------------------------------
Thu Oct 24 11:08:11 UTC 2013 - speilicke@suse.com
- Require python-setuptools instead of distribute (upstreams merged)
-------------------------------------------------------------------
Fri Sep 13 14:52:08 UTC 2013 - jmatejek@suse.com
- fixed %fdupes creating dangling symlinks (bnc#835687)
-------------------------------------------------------------------
Fri Apr 5 13:41:54 UTC 2013 - idonmez@suse.com
- Add Source URL, see https://en.opensuse.org/SourceUrls
-------------------------------------------------------------------
Mon Jan 14 15:01:41 UTC 2013 - saschpe@suse.de
- Add requirement on python-pyOpenSSL, thinner than M2Crypto
-------------------------------------------------------------------
Wed Oct 31 13:09:21 UTC 2012 - saschpe@suse.de
- Narrow the scops of fdupes (see bnc#784670)
-------------------------------------------------------------------
Tue Jan 24 13:49:57 UTC 2012 - bwiedemann@suse.com
- fix Obsoletes
-------------------------------------------------------------------
Tue Dec 13 13:16:21 UTC 2011 - coolo@suse.com
- fix license to be in spdx.org format
-------------------------------------------------------------------
Thu Sep 22 09:18:45 UTC 2011 - saschpe@suse.de
- Use SPDX style license
- Require python-distribute instead of python-setuptools
- Don't package testsuite
-------------------------------------------------------------------
Tue May 31 08:18:39 UTC 2011 - saschpe@suse.de
- Renamed to python-M2Crypto to match PyPI upstream name
* Added Provides/Obsoletes for python-m2crypto
- Fixed wrong-EOL, executable bit for docs rpmlint warnings
-------------------------------------------------------------------
Mon Apr 18 09:05:48 UTC 2011 - saschpe@suse.de
- Update to 0.21.1
- Support OpenSSL 1.0. Thanks to Miloslav Trmac for figuring out
how to fix test_smime.py
- Rename m2.engine_init to engine_init_error so that ENGINE_init
and ENGINE_finish can be exposed, thanks to Erlo
- 0.20 started releasing Python locks even around some operations
that interacted with the Python runtime, potentially causing
crashes and other weirdness, fix by Miloslav Trmac
- Make httpslib.ProxyHTTPSConnection work with Python 2.3
- Removed patches that are now upstream
- Removed authors from spec
-------------------------------------------------------------------
Tue Apr 20 08:46:03 UTC 2010 - lnussel@suse.de
- add some upstream patches to fix openssl 1.0 build
-------------------------------------------------------------------
Tue Mar 30 14:09:38 CEST 2010 - matejcik@suse.cz
- update to 0.20.2
* PGP subpackage is deprecated
* m2urllib now closes sockets properly
* port is now integer in ProxyHTTPSConnection
* many bugfixes
* test coverage up to 80%
- enabled test suite in %check phase
(requires python-setuptools and openssl binary to run)
-------------------------------------------------------------------
Fri Feb 27 10:21:12 CET 2009 - jblunck@suse.de
- Update to M2Crypto 0.19.1.
-------------------------------------------------------------------
Tue Jan 13 20:20:39 CET 2009 - matejcik@suse.cz
- package taken from devel:languages:python in OBS